Threat Intelligence Database

A use of uninitialized variable vulnerability exists in the BLF file parser of Wireshark versions 4.4.0 and 4.6.0. This flaw may lead to possible information disclosure. The vulnerability has a low severity rating and a CVSS score of 2.5. No official patch or remediation guidance is currently provided by the vendor.

A heap-based buffer overflow vulnerability exists in the Catapult DCT2000 protocol dissector in Wireshark versions 4.4.0 through 4.4.16 and 4.6.0 through 4.6.6. This flaw can cause the application to crash, resulting in a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 5.5. No official patch or remediation guidance is currently provided by the vendor.

A heap-based buffer overflow vulnerability exists in the pcapng file parser of Wireshark versions 4.6.0 through 4.6.6. This flaw can cause the application to crash, resulting in a denial of service condition. The vulnerability is identified as CWE-122 and has a CVSS v3.1 score of 4.7, indicating medium severity. No official patch or remediation guidance has been provided yet by the vendor.

A vulnerability in the FMP/NOTIFY protocol dissector of Wireshark versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows a denial of service condition due to unchecked input for a loop condition. This can cause the application to crash when processing crafted packets.

A NULL pointer dereference vulnerability exists in the SSH protocol dissector of Wireshark versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16. This flaw can cause the application to crash, resulting in a denial of service condition when processing certain SSH traffic.

A heap-based buffer overflow vulnerability exists in the Z39.50 protocol dissector of Wireshark versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16. This flaw can cause the application to crash, resulting in a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 5.5. No official patch or remediation guidance has been provided yet.

A heap-based buffer overflow vulnerability exists in the UMTS FP protocol dissector of Wireshark versions 4.4.0 to 4.4.16 and 4.6.0 to 4.6.6. This flaw can cause the application to crash, resulting in a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 5.5. No official patch or remediation guidance is currently provided by the vendor.

A stack-based buffer overflow vulnerability exists in the DBS Etherwatch file parser of Wireshark versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16. This flaw can cause the application to crash, resulting in a denial of service condition.

A stack-based buffer overflow vulnerability exists in the IEEE 802.11 protocol dissector of Wireshark versions 4.4.0 through 4.4.16 and 4.6.0 through 4.6.6. This flaw can cause the application to crash, resulting in a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 5.5. No official patch or remediation guidance has been provided yet.

A heap-based buffer overflow vulnerability exists in Wireshark versions 4.6.0 through 4.6.6 in the TLS ECH decryptor component. This flaw can cause the application to crash, resulting in a denial of service condition. The vulnerability does not impact confidentiality or integrity but affects availability. No official fix or patch information is currently available.